MfaChallengeFactor

A factor the SPA may use to satisfy the MFA challenge

Attributes (4)

Attribute	Type	Required	Description
method	AuthenticationFactorMethod	Yes	The factor method
methodId	string	Yes	The id of the enrolled factor (opaque to the SPA, must be echoed back in the proof for methods that don't bind another way)
kind	AuthenticationFactorKind	Yes	The factor kind (knowledge, possession, biometric) — the SPA filters against step-up acceptableKinds/excludeKinds hints
label	string	No	Optional human-readable label (e.g. provider name for OIDC, friendly name for FIDO)